Ghost CMS: Stored cross-site scripting via bookmark card images
Summary
Ghost versions 5.94.0 up to but not including 6.64.0 allow staff users, including Contributors, to store non-image files fetched from external websites as bookmark card icons or thumbnails. The stored content can contain arbitrary HTML served on the site's domain. An attacker with a Contributor or higher staff account can use this to compromise the sessions of other staff users, including administrators, when they view the content.
Affected
- Ghost 5.94.0 up to but not including 6.64.0
- Related duplicate ID: CVE-2026-105651
Fixed in
- Ghost 6.64.0 and later (vendor-confirmed fix in 6.64.0)
Workaround
- No vendor workaround known. The fix is the upgrade.
- Until patched, limit staff and Contributor accounts to trusted people and review existing accounts.
- Watch for unusual bookmark card activity.
Exploitation
- Requires a staff login with at least Contributor rights and user interaction by another staff member, such as an admin viewing the content.
- CISA SSVC: exploitation none, not automatable.
- Not listed in CISA KEV. EPSS very low (0.00255).
- No public proof of concept found at the time of research.
Our recommendation
- Check whether any Ghost instance runs version 5.94.0 to 6.64.0 and update to 6.64.0 or later, following the vendor's Docker or Ghost-CLI update documentation.
- Review staff and Contributor accounts and remove unneeded ones.
- Check the bookmark card content and admin activity logs for suspicious entries.
- Include both CVE-2026-104413 and CVE-2026-105651 in patch tracking.
- Monitor for public proof-of-concept code and vendor updates.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-347q-26qq-h2p6 github.com
- VulnCheck advisory: Ghost stored XSS via bookmark card images www.vulncheck.com
- OSV: GHSA-347q-26qq-h2p6 osv.dev
- GitLab advisory CVE-2026-105651 (duplicate) advisories.gitlab.com
- OSV: BIT-ghost-2026-104413 osv.dev
- Vulners VulnCheck record PT-2026-106185 vulners.com
- Strix CVE record CVE-2026-104413 www.strix.ai
- OpenCVE CVE-2026-104413 app.opencve.io
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 11:35.
Original description (NVD)
Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or thumbnails to compromise other staff users' admin sessions.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.